Lucene search
+L

250 matches found

OSV
OSV
added 2025/02/26 1:15 p.m.10 views

CVE-2024-13803

The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-marker’ parameter in all versions up to, and including, 5.2.3 due to insufficient input sanitization and output escaping. This makes it possib...

5.4CVSS5.9AI score0.00465EPSS
SaveExploits0References3
NVD
NVD
added 2025/02/26 1:15 p.m.21 views

CVE-2024-13803

The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-marker’ parameter in all versions up to, and including, 5.2.3 due to insufficient input sanitization and output escaping. This makes it possib...

6.4CVSS0.00465EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/02/26 7:1 a.m.13 views

CVE-2024-13803 Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-marker’ parameter in all versions up to, and including, 5.2.3 due to insufficient input sanitization and output escaping. This makes it possib...

6.4CVSS5.8AI score0.00465EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/02/26 7:1 a.m.36 views

CVE-2024-13803 Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-marker’ parameter in all versions up to, and including, 5.2.3 due to insufficient input sanitization and output escaping. This makes it possib...

6.4CVSS0.00465EPSS
SaveExploits0References3
CVE
CVE
added 2025/02/26 7:1 a.m.77 views

CVE-2024-13803

CVE-2024-13803 concerns the WordPress plugin Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates, affecting all versions up to 5.2.3. The vulnerability is a Stored Cross-Site Scripting via the data-marker parameter, caused by insufficient input sanitization and output escaping....

6.4CVSS5.8AI score0.00465EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2025/02/26 12:0 a.m.8 views

WordPress plugin Essential Blocks 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS7.8AI score0.00465EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/02/26 12:0 a.m.8 views

PT-2025-8684 · WordPress · The Essential Blocks – Page Builder Gutenberg Blocks

Name of the Vulnerable Software and Affected Versions: The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress versions up to, and including, 5.2.3 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and...

6.4CVSS8.1AI score0.00465EPSS
SaveExploits0References6
Patchstack
Patchstack
added 2025/02/25 11:33 p.m.8 views

WordPress Essential Blocks for Gutenberg plugin <= 5.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zer0gh0st in WordPress Plugin Essential Blocks for Gutenberg versions = 5.2.3...

6.4CVSS5.7AI score0.00465EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2025/02/25 3:15 p.m.30 views

CVE-2025-26871

Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through = 4.8.3...

8.8CVSS0.00391EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/25 3:15 p.m.11 views

CVE-2025-26871

Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Essential Blocks for Gutenberg: from n/a through 4.8.3...

8.8CVSS7.3AI score0.00391EPSS
SaveExploits0References1
CVE
CVE
added 2025/02/25 2:17 p.m.83 views

CVE-2025-26871

CVE-2025-26871 refers to a Missing Authorization vulnerability in Essential Blocks for Gutenberg (WP developers’ Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates). Affected versions are listed as from n/a through 4.8.3. The root cause is incorrectly configured access control...

8.8CVSS7.2AI score0.00391EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/02/25 2:17 p.m.44 views

CVE-2025-26871 WordPress Essential Blocks plugin <= 4.8.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through = 4.8.3...

4.3CVSS0.00391EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/02/25 2:17 p.m.15 views

CVE-2025-26871 WordPress Essential Blocks plugin <= 4.8.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through = 4.8.3...

4.3CVSS8.5AI score0.00391EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/02/25 12:0 a.m.9 views

WordPress plugin Essential Blocks for Gutenberg 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...

8.8CVSS8.7AI score0.00391EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/02/25 12:0 a.m.12 views

PT-2025-7830 · Unknown · Essential Blocks For Gutenberg

Name of the Vulnerable Software and Affected Versions: Essential Blocks for Gutenberg versions through 4.8.3 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For Essential...

8.8CVSS9.5AI score0.00391EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2025/02/22 4:16 p.m.14 views

WordPress Essential Blocks plugin <= 4.8.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Essential Blocks for Gutenberg versions = 4.8.3...

8.8CVSS7AI score0.00391EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2025/01/08 8:15 a.m.4 views

CVE-2024-12045

The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the maker title value of the Google Maps block in all versions up to, and including, 5.0.9 due to insufficient input sanitization and output escaping...

4.8CVSS7.3AI score0.00241EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/01/08 7:18 a.m.19 views

CVE-2024-12045 Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting

The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the maker title value of the Google Maps block in all versions up to, and including, 5.0.9 due to insufficient input sanitization and output escaping...

4.4CVSS0.00241EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/01/08 7:18 a.m.11 views

CVE-2024-12045 Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting

The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the maker title value of the Google Maps block in all versions up to, and including, 5.0.9 due to insufficient input sanitization and output escaping...

4.4CVSS5.8AI score0.00241EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/01/08 12:0 a.m.5 views

WordPress plugin Essential Blocks 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

4.8CVSS7.6AI score0.00241EPSS
SaveExploits0References3
Rows per page
Query Builder